I'm not sure what I'm missing but I can't reproduce this. When I run generate-root-ca and reissue certs I see /usr/local/share/ca-certificates/keystone_juju_ca_cert.crt change on the dashboard units and running curl from the openstack-dashboard against the keystone endpoint continues to work.
Is this problem intermittent or is it consistently reproducible ? Is it only the ca certificate on the dashboard units that need updating or are other applications affected too?
I'm not sure what I'm missing but I can't reproduce this. When I run generate-root-ca and reissue certs I see /usr/local/ share/ca- certificates/ keystone_ juju_ca_ cert.crt change on the dashboard units and running curl from the openstack-dashboard against the keystone endpoint continues to work.
Is this problem intermittent or is it consistently reproducible ? Is it only the ca certificate on the dashboard units that need updating or are other applications affected too?